GMX Crosschain V2.2 4 Report

Guardian Audits26 Jul 2025Code version: not recorded (see the report)

Audit · firm’s term: security review

Part of Guardian Audits’ series

Guardian Audits reviewed GMX (GMX Crosschain V2.2 4 Report) on 26 Jul 2025: 36 findings, 0 critical; 17 marked fixed, 18 acknowledged, 1 open.

No open critical findings

Open the report Open GMX’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings36

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	1	0	2
Medium	0	9	6
Low	0	9	9

Medium63/64 Rule Is Not Considered In ValidationsAcknowledged

The report gives no description here.

MediumComposed Actions Gas Inaccurately ValidatedAcknowledged

The report gives no description here.

MediumInaccurate Liquidations Due To Incorrect CappingAcknowledged

The report gives no description here.

MediumlzCompose Can Still Be ExploitedAcknowledged

The report gives no description here.

MediumMax Lent Validation Misses Pool Amount ChangesAcknowledged

The report gives no description here.

MediumOrder Updates Do Not Update lastSrcChainIdAcknowledged

The report gives no description here.

MediumPositive Price Impact Is Not GuaranteedAcknowledged

The report gives no description here.

MediumTraderReferralCode OverwrittenAcknowledged

The report gives no description here.

MediumUnset Configuration KeysAcknowledged

The report gives no description here.

LowBridged Deposit Might Fail Due To OracleAcknowledged

The report gives no description here.

Show 8 more

LowDuplicated srcChainId ValidationsAcknowledged

The report gives no description here.

LowEnum Ordering ConsistencyAcknowledged

The report gives no description here.

LowForcing srcChainId To Equal dstEid ChainAcknowledged

The report gives no description here.

LowNewly Added Lending Config Keys Remain UnsetAcknowledged

The report gives no description here.

LowNonexistent srcChainId Is Not ValidatedAcknowledged

The report gives no description here.

LowPrice Impact Withdrawal Factor May DoS UsersAcknowledged

The report gives no description here.

LowreduceLentAmount DoS'd With Atomic SwapAcknowledged

The report gives no description here.

LowTheoretical Censorship Risk Via Stargate ReentrancyAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of GMX’s security record

GMX

Audits38 audits by 1 firmLast audit Apr 2026, by Guardian Audits.

Critical findings1 critical acknowledged, not fixedReported in “GMX VesterCap Updates” by Guardian Audits, Jul 2024. The team acknowledged it.

Open GMX’s security record

Security firm

Guardian Audits

15 projects reviewed · 99 reports · latest Aug 2026

See Guardian Audits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.